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Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

2. Claims 1-17 are rejected under 35 U.S.C. 102(b) as being anticipated by Novoa et al. (US 
Patent No. 6,223,284 81). 

Regarding claim 1, Novoa discloses security apparatus comprising a receiver for 
receiving a security metric associated with a computer entity [..the remote flash an security 
package may be resident to the target computer system; see abstract and col. 11, lines 3-22]; 
means for presenting to a user the security metric; means for modifying a security setting 
associated with the computer entity to enable the modification of the security metric 
associated with the computer entity [..the administrator may modify the current setting of any 
selected security setting dialog box; see col. 8, lines 19-32 and col. 7, lines 50-67]. 

Regarding claim 2, Novoa discloses, wherein the security metric is presented to a user as 
a representational model of software and/or hardware fiinctionality of the computer entity (see 
figures 6 A- 10). 

Regarding claim 3, Novoa discloses according to claiml, fiuther comprising input means 
for allowing a user to interact with the modifying means to modify the security setting (see coL. 
13, lines 45-64). 
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Regarding claim 4, Novoa discloses further comprising means for establishing possible 
modifications to the security setting based upon the received security metric (see col. 26, lines 
20-67). 

Regarding claim 5, Novoa discloses, wherein the level of complexity of the presented is 
selectable by a user metric (see col. 12, lines 14-54). 

Regarding claim 6, Novoa discloses method for modifying the security status of a 
computer apparatus, the method comprising receiving a security metric associated with a 
computer entity; presenting to a user the security metric; modifying a security setting associated 
with the computer entity to enable the modification of the security metric associated with the 
computer entity (see col. 14, lines 28-67 and figures 6A-9). 

Regarding claim 7, Novoa discloses wherein representing the plurality of component 
comprises representing software and/or hardware functionality of the computer platform (see 
figure 11). 

Regarding claim 8, Novoa discloses further comprising presenting to the user possible 
modifications to the security setting (see col. 7, lines 40-67). 

Regarding claim 9, Novoa discloses, further comprising allowing the user to select a level 
of complexity of representing to the user the plurality of components (see figure 13). 

Regarding claims 10 and 14, Novoa discloses a memory to store computer-readable code; 
and a processor operatively coupled to said memory and configured to implement said 
computer-readable code, said computer-readable code being configure to represent to a user a 
plurality of computer components, represent to the user interactions among the plurality of 
computer components [..the remote flash an security package may be resident to the target 
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computer system; see abstract and col. 11, lines 3-22 and col. 2, lines 40-67]; and allow the user 
to modify a security setting associated with at least one of the computer components [..the 
administrator may modify the current setting of any selected security setting dialog box; see col. 
8, lines 19-32 and col. 7, lines 50-67]. 

Regarding claims 11 and 15, Novoa discloses, wherein representing the plurality of 
computer components comprises representing software and/or hardware fiinctionality of a 
computer (see figures 6A-10). 

Regarding claims 12 and 16, Novoa discloses, wherein the computer-readable code is 
further configured to present the user possible modifications to the security setting (see coL. 13, 
lines 45-64). 

Regarding claims 13 and 17, Novoa discloses, wherein the computer-readable code is 
further configured to allow the user to select a level of complexity of representing to the user the 
pluraHty of computer components (see figure 13).. 

Response to Arguments 
Applicant's arguments filed on 10/07/05 have been fully considered but they are not 
persuasive. 

The applicant argues that Novoa does not teach or suggest represent to a user a plurality 
of computer components, represent to the user interactions among the plurality of computer 
components; and allow the user to modify a security setting associated with at least one of the 
computer components. The Examiner respectfully disagrees. As shovra in figures 9-11, Novoa 
teaches the new ROM image and flash utility may be initially stored onto a secondary ROM or 
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non-volatile random access memory (NVRAM) and then copied to the system ROM of 
the computer system. The system ROM is placed in a protected state by the basic input/output 
system (BIOS) services during power up of the computer system, thereby preventing a flash 
operation to the system ROM. After the new ROM image and flash utility are downloaded, the 
flash utility forces the user to create a flash utility diskette. The user then cold boots the 
computer system with the created diskette in the floppy drive. When the computer system 
detects the created diskette, the computer system brings up the program to flash the system 
ROM. The program to flash the system ROM can prompt the user to enter an administrator 
password. The program then allows the user to set a configuration parameter or flag to indicate 
a request to flash the system ROM with the new ROM image. The request to flash the ROM is 
queued. Upon a reboot of the computer system, the flash utility diskette provides the 
administrator password to the system ROM to place the system ROM in an unprotected state 
allowing for a flash operation to the system ROM. Placing the system ROM in an 
unprotected state upon reboot prevents the BIOS from protecting or locking the ROM. The 
flash utility diskette next flashes the system ROM. It thus has been necessary for a user to copy 
a flash utility and ROM image to the system ROM, reboot the computer system, and enter an 
administrator password as a prerequisite to flashing the ROM. The flash utility which performs 
the flash of the system ROM also verifies that the system ROM is flashed correctly. The 
computer system must then be rebooted again to activate the new ROM image flashed to the 
system ROM, as recited in col. 2, lines 40-67. 

The applicant argues that Novoa does not teach or suggest a memory to store computer- 
readable code; and a processor operatively coupled to said memory and configured to 
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implement said computer-readable code, said computer-readable code being configure to 
represent to a user a plurality of computer components, represent to the user interactions among 
the plurality of computer component; and allow the user to modify a security setting associated 
with at least one of the computer components. The Examiner respectfully disagrees. As shown 
in figures 4-6, Novoa teaches the options may for example include a Quick-Lock mode option 
for disabling a keyboard and mouse interface from within an apphcation, a Quick-Blank mode 
option for blanking a video display from within an application, a removable media bootabihty 
option for preventing a user from booting the computer S from the removable media drives, a 
removable media writeability option for preventing a user from writing to the removable media 
drives, an IDE controller option for preventing a user from booting the computer system S from 
the fixed drives 26 connected to the IDE controller, a SCSI controller option for preventing a 
user from booting the computer system S from the devices connected to the SCSI controller, a 
serial port option for preventing a user from transferring data through the integrated serial 
interface, a parallel port option for preventing a user from transferring data through the 
integrated parallel interface, a USB port option for preventing a user from transferring data 
through the integrated USB interface, an option to change the administrator password, a smart 
cover lock option for inhibiting access to the interior of the computer system S to prevent 
unwanted configuration changes or component removal, a smart cover sensor option to alert a 
user when the computer cover or side panel has been removed, an option to change the 
ownership tag which specifies the owner of the computer system S, and an option to change the 
asset tag which is a unique number or text string such as an owner's property identification 
number used to help track the specific computer system S. The main window may also be 
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controlled by clicking on a back window button for selecting the previous security setting 
option and by clicking on a next window button for selecting a next security setting option. If 
the administrator wishes to cancel selection of the security options, the administrator may click 
a cancel window button. If the administrator desires assistance in selecting security options, the 
user may click on a help window button. Further, the administrator may modify the current 
setting of any selected security setting option by double-clicking with the pointing device, as 
recited in column 7, lines 30-67. 

Accordingly, the claimed invention as represented in the claims does not represent a 
patentable distinction over the art of record. 

Conclusion 

The prior art made of record on form PTO-892 and not relied upon is considered 
pertinent to applicant's disclosure. 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated fi-om the mailing date of the advisory action. In no event. 
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however, will the statutory period for reply expire later than SIX MONTHS from the maihng 
date of this final action. 

Any inquiry conceming this communication or earlier communications from the 
examiner should be directed to Cao (Kevin) Nguyen whose telephone number is (571)272-4053. 
The examiner can normally be reached on 8:30AM-5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Cabeca can be reached on (571)272-4048. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status inform.ation for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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